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Honorable Commissioner for Patents and Trademarks ro c=? 

Washington, D.C. 20231 o 

In compliance with the applicants duty of disclosure under 
37 CFR § 1.56, the attached form and documents indicate 
information of which the applicant has recently become aware 
which may be relevant to the above -identified application. 

The additional information is in the form of references 
which have been cited in a corresponding patent application 
pending before the British Patent Office, the Search Report of 
which is attached, along with other references which have come to 
the attention of the applicant's counsel through recent searching. 

With respect to the references from the British Patent 
Office, the relevance of these references shall be apparent from 




the X and Y designations and indicated pages appearing on the 
attached Search Report . 

Among other non-patent references, which were discovered 
through Internet searching, "Building a Network Monitoring and 
Analysis Capability, Step by Step" discusses monitoring of IP 
packets using the program tcpdump (see "Overview of Step Sensor 
Analysis System" on pages 21-22) . "FAQ" Network Intrusion 
Detection Systems" discusses, on page 36, a commercial product 
called "Black Ice" which serves to automatically reconfigure a 
min-firewall in response to detected attacks." Finally, three 
other references of are included, which may be of general 
interest due to their discussion of Denial of Service (DoS) 
attacks and "references" sections. 

Copies of each of the citations are attached. It is 
respectfully requested that the Examiner indicate consideration 
of the references by initialing the attached Information 
Disclosure Statement form and returning a copy thereof to the 
applicants . 

Insofar as this Information Disclosure Statement is being 
filed before receipt of a first office action on the merits, no 
fees are due in connection herewith. Notwithstanding, should it 
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be deemed that any fees are due, such fees may be charged to 
Attorney's Deposit Account No. 07-2519. 
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M. Ranum, "Intrusion detection: ideals, expectations and realities," CSI NetSec Conference, Saint Louis, MO 
(June 1999). 




Press Release, "Cisco Introduces NetRanger Intrusion Detection Solution," (November 1998). 






Press Release, "Network Flight Recorder Inc., Announces Commercial Availability," (January 1998). 




"FAQ: Network Intrusion Detection Systems," Version 0.6.1, (August 1999). 
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Sans Institute, "Building a Network Monitoring and Analysis Capability Step by Step," Ver. 1.1.5 (July 1998). 
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